CVE-2017-3215 - AskarLabs CVE Database

CVE-2017-3215

Vendor Milwaukee Tool

Product ONE-KEY

Weakness CWE-613 · Insufficient session expiration

Published June 20, 2017

Last update August 5, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Milwaukee ONE-KEY Android mobile application uses bearer tokens with an expiration of one year. This bearer token, in combination with a user_id can be used to perform user actions.

Key dates

02Disclosure timeline

June 20, 2017 CVE published

August 5, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2017-3215 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/613.html

Related vulnerabilities

04Related CVE

CVE-2024-41827 CVE-2025-30516 Unauthorized Notification Exposure in Mobile App Under Specific Conditions CVE-2024-5995 Soar Cloud HR Portal - Insufficient Session Expiration CVE-2025-36360 IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to an Insufficient Session Expiration vulnerability CVE-2021-35034